$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: l6M6EdL309rLRfKnrKDE7BEaqioBnCX3SCXuOuFLWww= Subject key identifier: 52:3A:0B:7D:FD:C3:75:BC:CA:B6:05:C6:49:B1:E7:F7:59:60:CF:87 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849B9A9F47C7469D8A303AA1680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:f4:7c:74:69:d8:a3:03:aa:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=8210fc9f-df70-45f8-bb58-c289a659db42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:1b:5d:38:94:70:71:c9:a6:0e:75:50:cb: bc:3d:25:b6:cb:b1:d9:ae:db:7a:19:8d:e8:4e:4d: f4:0f:87:f1:be:b4:70:a1:2f:0b:e0:4e:d4:f4:b6: 69:1c:52:ad:a1:3c:90:e1:e9:b1:e3:bf:b4:4f:d2: 02:d2:5c:f9:74:08:31:57:5e:f6:ca:13:1a:84:b3: a7:ce:41:b6:6e:79:87:55:a4:bb:88:c9:aa:62:1b: a7:54:c4:43:9f:82:7a:fc:74:e9:4d:d7:1a:23:13: ed:4d:be:c6:ff:cd:3f:6b:ee:d4:15:b0:6f:28:cc: 3b:02:89:f7:2c:59:83:18:ab:7a:1e:07:9e:d4:87: 3c:73:d2:d5:f4:35:7d:22:30:23:22:bf:ed:8a:f9: f0:f7:89:aa:24:6a:f0:e5:95:7b:7f:46:91:1f:72: 63:47:5d:50:92:b9:bd:90:93:21:2a:d4:bd:91:28: a7:12:34:92:98:68:77:1d:b4:cf:11:02:f7:63:b7: a7:51:bd:59:1a:6b:d2:2a:d0:08:5c:c0:70:5f:a0: a7:8d:67:fb:55:df:40:05:ce:8e:04:b0:c1:9b:6b: 10:db:88:68:d9:a6:3d:33:51:1b:76:49:6b:f0:7c: bf:a2:12:94:0a:9b:a7:e0:bf:16:33:89:b7:76:fb: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:0B:7D:FD:C3:75:BC:CA:B6:05:C6:49:B1:E7:F7:59:60:CF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:48:c9:5b:fe:ee:4a:30:55:32:0f:85:0f:86:67:3d:8f:5c: 47:f3:5f:00:e5:4c:10:04:b9:3c:fa:75:fc:39:c6:94:40:a4: dc:17:af:e1:ce:9c:c5:57:90:0a:e1:a6:36:e2:01:ba:38:92: a8:f7:fb:f4:3e:a8:5a:50:0d:07:61:a9:9d:f4:c0:68:88:4e: a6:a8:bc:8b:af:fe:fc:bb:31:7c:34:45:1e:e8:3a:67:d0:38: 2c:a9:85:4e:67:00:8e:2a:75:1e:9e:87:68:32:60:d1:1a:21: 0f:fa:3d:51:87:2c:42:25:5a:52:e7:f5:2a:8d:a7:03:a0:8c: af:94:a0:1f:b3:65:d6:cb:7c:27:b9:93:86:b7:d9:cd:0e:90: 48:fb:6f:c2:bb:09:41:73:87:12:dc:b8:2c:7c:05:8c:33:cb: 25:ee:36:73:8a:37:a1:0f:8e:18:7d:da:86:d1:f7:28:16:cc: df:39:2c:76:b2:26:fd:63:97:67:07:34:e7:d7:b9:e5:05:ff: 42:ff:09:cb:bd:85:e5:6d:b5:9b:c5:3d:0a:b3:1e:aa:6e:94: 0e:f0:ce:5a:6b:4e:d3:9f:fe:b2:80:98:5a:53:80:c2:78:60: 16:16:ee:e2:db:08:81:65:3d:2b:96:a4:ef:d6:ba:c5:a9:84: 62:cf:24:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfR8dGnYowOqFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODIxMGZjOWYtZGY3MC00NWY4LWJiNTgtYzI4OWE2NTlkYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/0bXTiUcHHJpg51UMu8PSW2y7HZrtt6GY3o Tk30D4fxvrRwoS8L4E7U9LZpHFKtoTyQ4emx47+0T9IC0lz5dAgxV172yhMahLOn zkG2bnmHVaS7iMmqYhunVMRDn4J6/HTpTdcaIxPtTb7G/80/a+7UFbBvKMw7Aon3 LFmDGKt6Hgee1Ic8c9LV9DV9IjAjIr/tivnw94mqJGrw5ZV7f0aRH3JjR11Qkrm9 kJMhKtS9kSinEjSSmGh3HbTPEQL3Y7enUb1ZGmvSKtAIXMBwX6CnjWf7Vd9ABc6O BLDBm2sQ24ho2aY9M1Ebdklr8Hy/ohKUCpun4L8WM4m3dvttswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI6C339w3W8yrYFxkmx5/dZYM+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClIyVv+7kowVTIPhQ+GZz2PXEfzXwDlTBAEuTz6dfw5xpRApNwXr+HO nMVXkArhpjbiAbo4kqj3+/Q+qFpQDQdhqZ30wGiITqaovIuv/vy7MXw0RR7oOmfQ OCyphU5nAI4qdR6eh2gyYNEaIQ/6PVGHLEIlWlLn9SqNpwOgjK+UoB+zZdbLfCe5 k4a32c0OkEj7b8K7CUFzhxLcuCx8BYwzyyXuNnOKN6EPjhh92obR9ygWzN85LHay Jv1jl2cHNOfXueUF/0L/Ccu9heVttZvFPQqzHqpulA7wzlprTtOf/rKAmFpTgMJ4 YBYW7uLbCIFlPSuWpO/WusWphGLPJDQ= -----END CERTIFICATE-----Generated at Mon May 5 23:16:35 2025 by rpki-client